Search Vulnerabilities

Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Write

HAXCMS PHP has a File Upload Validation Bypass

WP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload

HAX CMS PHP Has a Stored XSS via Case-Sensitivity Mismatch in HTML Upload Validation

code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload

tittuvarghese CollegeManagementSystem Student Data Upload Endpoint upload_student_data.php unrestricted upload

IRIS has an Insecure File Upload

mjperpinosa stumasy change_profile_image.php unrestricted upload

mjperpinosa stumasy add_post.php unrestricted upload

Unrestricted Upload of File with Dangerous Type in SOPlanning

Metasoft 美特软件 MetaCRM upload.jsp unrestricted upload

Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload

SIM-PKH 2.4.1 Arbitrary File Upload via aksi_pengurus.php

HaPe PKH 1.1 Arbitrary File Upload via aksi_foto.php

Interinfo｜DreamMaker - Arbitrary File Upload

Interinfo｜DreamMaker - Arbitrary File Upload

GutenBee <= 2.20.1 - Authenticated (Author+) Arbitrary File Upload via wp_check_filetype_and_ext Filter

Crawlomatic Multipage Scraper Post Generator <= 2.7.2 - Authenticated (Author+) Remote Code Execution via 'callback_raw' Shortcode Attribute

FacturaScripts: Authenticated Remote Code Execution (RCE) via GIF Image Upload in Product Images

Dalfox: Unauthenticated Arbitrary File Create/Append via `output` Option in Dalfox Server Mode